PT-2023-26572 · Pimcore · Pimcore

Name of the Vulnerable Software and Affected Versions: Pimcore versions prior to 10.6.7 Description: A path traversal vulnerability exists in the AssetController::importServerFilesAction, which allows an attacker to overwrite or modify sensitive files by manipulating the pimcore log parameter. Th...

PT-2023-18922

Name of the Vulnerable Software and Affected Versions pimcore/pimcore versions prior to 10.5.21 Description The issue allows an authenticated attacker to abuse import-server-files with a path traversal to download an arbitrary file from the server. This can result in the exposure of confidential...